★ 0 · Updated 2026-09-15
Detect abuse of elevation control mechanisms including UAC bypass, sudo exploitation, and setuid/setgid manipulation using system logs.
Browse skills that share this tag.
★ 0 · Updated 2026-09-15
Detect abuse of elevation control mechanisms including UAC bypass, sudo exploitation, and setuid/setgid manipulation using system logs.
★ 12 · Updated 2026-09-11
Detect LSASS credential dumping, SAM database extraction, and NTDS.dit theft using Sysmon Event ID 10, Windows Security logs, and SIEM correlation rules
★ 1,119 · Updated 2026-06-30
Implements full disk encryption on Windows endpoints using BitLocker